new matching rule

I read in one of the white
papers that there is some matching rule that can check the contents of a
certificate that is posted in ldap. Is that rule in application now? If so,
please tell me the draft name and how do i use this rule?